
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json)
Hash identifier: yaH5YL7GnstAcb0LjrQ9c4dGXdIk1Xx9kMYPb5IXMWs=
Subject key identifier: BD:75:0D:39:CC:75:E0:9E:87:34:BC:B6:B8:4C:F5:ED:D6:DF:C8:57
Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
Certificate serial: 1766
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
Manifest number: 175C
Signing time: Sun 02 Nov 2025 16:36:39 +0000
Manifest this update: Sun 02 Nov 2025 16:36:39 +0000
Manifest next update: Sun 09 Nov 2025 16:36:39 +0000
Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: K59TYQdBX6e6et3gsI5RAbWHp8uHdBpwWZIXbPL3cPc=)
2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: IZm4bUn/JmIHtecsy8bw34L4o+Q1Xnkykngp8peDfE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl
rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5990 (0x1766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
Validity
Not Before: Nov 2 16:36:39 2025 GMT
Not After : Nov 9 16:36:39 2025 GMT
Subject: CN=69078897-239e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:16:93:78:67:9d:a5:29:a1:dd:7b:0b:87:
43:70:bf:5a:45:0d:5a:78:97:55:c6:e0:34:01:b2:
5c:49:3c:4c:8f:23:86:46:2c:22:cd:0b:d7:7c:f8:
66:6f:54:8c:24:b9:7a:fe:b5:f5:08:99:a9:35:df:
4a:4c:00:63:54:f2:dc:cd:be:1c:0e:e9:74:2e:b0:
83:3e:d6:d9:50:47:17:39:42:83:4f:a2:35:9f:49:
48:10:c6:77:b9:54:99:6f:d2:6e:2d:c9:4f:14:ad:
ff:5a:de:6e:5d:07:c3:b0:86:ad:e8:22:3b:8f:64:
b5:40:3a:d2:47:93:c3:0f:eb:32:a5:99:1d:0b:69:
c2:1f:e0:b3:a9:f4:25:2c:4d:8d:98:2c:dd:cd:12:
b2:46:d9:c2:e2:35:3c:13:ca:a5:94:df:9a:21:13:
89:cd:61:37:24:ac:4e:eb:c2:98:71:44:8f:f4:ce:
7d:1d:5b:27:f8:68:75:ed:28:b4:8d:9d:72:2d:34:
82:12:0a:17:7a:0e:2e:a6:a5:ae:36:88:56:0e:ad:
f4:c2:48:f2:af:f7:62:04:fc:35:a5:9c:b1:3e:57:
7d:97:28:ed:b0:04:7c:a6:83:57:29:b3:62:5f:bb:
5c:78:fc:e0:fd:6c:d6:c5:39:bb:03:11:a0:c5:d3:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:0D:39:CC:75:E0:9E:87:34:BC:B6:B8:4C:F5:ED:D6:DF:C8:57
X509v3 Authority Key Identifier:
keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e3:5a:86:87:a3:c4:9e:a8:1b:94:c6:5f:29:88:4c:1c:d8:
6b:74:83:e9:b5:6f:dc:46:7e:47:6d:02:ec:f3:ed:5a:44:c8:
e0:a3:da:27:3d:7e:ef:9b:55:38:44:25:c4:09:93:50:bb:5c:
6b:3e:35:43:83:23:a4:f4:90:ea:86:ab:ed:e0:68:ca:27:00:
cd:74:b5:68:39:09:6e:7d:70:25:e5:bc:82:f5:5e:c2:39:65:
07:f1:7a:db:85:c4:e0:c4:b9:f6:e6:49:8c:6a:4a:49:17:9b:
35:fe:1d:01:4d:df:bb:15:04:fd:bc:89:94:08:8b:7d:0c:4b:
ba:95:8d:9c:ac:c6:2f:82:67:ba:dc:b5:15:0f:d1:5e:e8:58:
56:88:ab:11:fc:85:2b:d0:41:07:5f:26:aa:f9:3f:0b:34:40:
fc:62:4a:da:d8:2b:7a:ef:de:98:1f:a1:17:fc:34:5b:ed:3e:
4b:4d:f1:4d:2c:6b:56:e7:2e:25:60:ca:a5:11:b7:a5:53:cb:
21:26:0f:30:31:0e:49:a6:ed:73:0e:3c:b7:70:17:b1:8f:fe:
c1:28:65:29:2b:a8:76:7e:d7:04:14:56:bf:25:37:e1:79:88:
b5:62:fc:b7:8e:f8:7a:c6:39:88:65:4c:7b:84:af:2a:ee:7f:
62:6c:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:28 2025 by rpki-client